Autoza UK
by Screed369 · remote · no sign-in to list tools · v1.0.0 · published by GitHub user Screed369
UK used cars: road tax (VED), ULEZ charges, MOT dates, DVSA reliability, live dealer stock.
9 tools: 6 change things and 3 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things6Claude Code: ask: see these tools
- Only reads3Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http autoza-uk https://autoza.co.uk/api/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
9 tools
Changes things 6Claude Code: ask
ask_about_carAnswer a buyer's specific questions about ONE car listed on Autoza — previous owners, service history, warranty, number of keys, previous use, and the core specification.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Answer a buyer's specific questions about ONE car listed on Autoza — previous owners, service history, warranty, number of keys, previous use, and the core specification. Every answer comes from the dealer's own listing and says so: it is what the dealer states, not an independent inspection. A question the listing does not answer comes back as unknown, which does not mean no. Pass the listing URL or id returned by search_used_cars. If the car has sold or been withdrawn, the response is status no_longer_for_sale with no answers. When the selling dealer has opted in to showing MOT history, the response also carries mot_history: that car's official DVSA MOT test record.
Annotations the server declares
- title: Ask about a listed car
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
calculate_car_taxCalculate annual UK vehicle tax (VED / road tax) for a car.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Calculate annual UK vehicle tax (VED / road tax) for a car. Handles all three UK systems: cars first registered before 1 March 2001 (taxed on engine size, so engine_size_cc is required), 1 March 2001 to 31 March 2017 (CO2 bands £20–£790, so co2 is required), and from 1 April 2017 (flat standard rate). Also works out the Expensive Car Supplement: over £40,000 list price when new for petrol, diesel and alternative fuel; over £50,000 for a zero-emission car first registered on or after 1 April 2025; and none for a zero-emission car first registered before 1 April 2025, whatever it listed for. The boundaries are dates, so registration_date gives an exact answer where the year alone is ambiguous. If an input the car's tax system needs is missing, the tool returns an error naming it rather than a figure. Use for questions about UK car tax, road tax or VED.
Annotations the server declares
- title: Calculate UK car tax (VED)
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
check_clean_air_zoneCheck whether a car is compliant with UK clean air zones (London ULEZ, Bristol, Birmingham) and what it would cost to drive into them.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Check whether a car is compliant with UK clean air zones (London ULEZ, Bristol, Birmingham) and what it would cost to drive into them. Returns compliance, the daily charge per zone, and estimated annual cost. Only 3 of the 8 English charging zones charge private cars; Scotland uses Low Emission Zones, which issue penalties rather than a daily charge. Needs the registration year and fuel (the year is not needed for an electric car); a missing input returns an error naming it. Use for ULEZ, CAZ, clean air zone or emissions-charge questions.
Annotations the server declares
- title: Check ULEZ / Clean Air Zone charges
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
check_mot_due_dateWork out when a car's MOT test is due, and the earliest date it can be tested without losing its renewal date.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Work out when a car's MOT test is due, and the earliest date it can be tested without losing its renewal date. These are Great Britain (DVSA) rules: a car's first MOT falls on the third anniversary of registration, then annually. Northern Ireland is tested by the DVA, where the first test is not due until 4 years old. Test up to one calendar month minus a day before the current certificate expires and the renewal date is kept; test earlier and it resets. Pass first_registered for a car that has never had an MOT, or mot_expires for one that has. If first_registered puts the first test in the past, the response says so and points to the car's MOT record rather than giving a due date. Use for questions about MOT due dates, MOT timing, or when a car needs testing.
Annotations the server declares
- title: Work out MOT due date
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
estimate_running_costsEstimate what a specific vehicle on Autoza costs to run for a year in GBP, with a range wherever a figure is modelled.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Estimate what a specific vehicle on Autoza costs to run for a year in GBP, with a range wherever a figure is modelled. A car gets road tax, fuel, servicing, the MOT test fee and insurance. A motorcycle or van in Great Britain gets road tax and the MOT only: fuel, servicing and insurance are not estimated, so its total is partial and not_included says why. Caravans, motorhomes and trucks, and motorcycles and vans in Northern Ireland, come back with available false, because their rates and test differ. Pass the listing URL or id returned by search_used_cars. A component that cannot be worked out is left out of the total rather than guessed. A vehicle that has sold or been withdrawn comes back as status no_longer_for_sale rather than an estimate.
Annotations the server declares
- title: Estimate a listed vehicle's running costs
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
mot_outlookOdds that a used car passes its next MOT first time, for its age and mileage, counted from DVSA's own MOT test records with odometer readings (Great Britain) — and how those odds m…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Odds that a used car passes its next MOT first time, for its age and mileage, counted from DVSA's own MOT test records with odometer readings (Great Britain) — and how those odds move one mileage band lower or higher for a car of the same age. Pass make and model as well: for the models we cover it adds that model's pass rate at the same mileage, compared fairly against cars of the same ages, and it says plainly when a model is not covered rather than guessing. It is a rate across the tested fleet, not a prediction for one car. Use when someone asks whether a high-mileage car will pass its MOT, how much mileage matters for an MOT, or whether a particular used car is likely to need MOT work.
Annotations the server declares
- title: Estimate MOT pass odds by age and mileage
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
Only reads 3Claude Code: allow
get_model_reliabilityGet known common faults, best and worst model years, and real DVSA MOT first-time pass rates for a specific used car model in the UK.No findings
Why it is in this group
- The name "get_model_reliability" says "get": a word for reading.
Description, as the server wrote it Get known common faults, best and worst model years, and real DVSA MOT first-time pass rates for a specific used car model in the UK. The MOT pass rates are DVSA Class 4 test records for Great Britain only, age-matched against the national average; a pass with rectification at the station counts as a first-time pass (DVSA's own initial-test measure counts it as a failure and reports a lower figure). Each guide covers the generations named in its generation field; pass registration_year to get that year's DVSA pass rate and to be told when the car is from a generation the guide does not describe. Call with no model_slug to list the models covered. Use when someone asks whether a specific model is reliable, what goes wrong with it, which year to buy or avoid, or what to check before buying one.
Annotations the server declares
- title: Get model reliability and MOT pass rates
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
get_uk_price_guideGet current UK used-car asking-price guidance from live dealer listings on Autoza — typical (median), lowest and highest asking price, optionally narrowed to a make or model.No findings
Why it is in this group
- The name "get_uk_price_guide" says "get": a word for reading.
Description, as the server wrote it Get current UK used-car asking-price guidance from live dealer listings on Autoza — typical (median), lowest and highest asking price, optionally narrowed to a make or model. Where too few cars match to give a fair figure it says so instead of answering. Cars unless vehicle_type asks for vans, motorcycles or other stock. Prices are GBP and reflect what dealers are asking right now, not trade or valuation estimates. Use to answer "what do X cost used in the UK" or to sanity-check whether an advertised price is reasonable.
Annotations the server declares
- title: Get UK asking-price guide
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
search_used_carsSearch live used cars for sale from UK dealers on Autoza, with current asking prices in GBP and mileage in miles.No findings
Why it is in this group
- The name "search_used_cars" says "search": a word for reading.
Description, as the server wrote it Search live used cars for sale from UK dealers on Autoza, with current asking prices in GBP and mileage in miles. Returns a canonical autoza.co.uk URL, the town or area, and the vehicle type for each result. Searches cars unless vehicle_type asks for vans, motorcycles or other stock. If nothing matches every filter, optional filters are relaxed one at a time and the response lists which ones. A result whose dealer title says SOLD, SALE AGREED or DEPOSIT PAID carries availability_caution; a result with no asking price has price_gbp null, and price_note flags a very low price that may be for parts or accessories rather than a vehicle. Use when someone wants to find, browse or compare actual vehicles currently for sale in the UK.
Annotations the server declares
- title: Search used cars for sale
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or untrusted-input or outbound.
- Reads private data0
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write0
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out0
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Remote posture
What anyone on the internet sees at the remote endpoint: an anonymous initialize and tools/list, and the public OAuth metadata.
Looked at Oct 22, 2026, 14:54 UTC, unchanged since Oct 22, 2026. No credentials were sent and no tool was called. What is looked at.
- Reachable
- yes
- HTTP status of an anonymous initialize
- 200
- tools/list served without credentials
- yes
- Tools that change things, listed without credentials
- 6
- Protocol version
- 2025-06-18
- WWW-Authenticate on 401
- not observed
- resource_metadata in WWW-Authenticate
- none
- RFC 9728 protected resource metadata
- none
- Authorization servers
- none
- Legacy HTTP+SSE transport
- no
- Dynamic client registration
- not observed
- Client ID metadata documents
- not observed
- WarnThe whole server
The endpoint served tools/list without credentials, and the list has 6 tools that change things (6 write). Whether a call also works without credentials was not tested: tools are never called.
What this check looks forMatched text
https://autoza.co.uk/api/mcp: tools/list returned 9 tools to an anonymous client, including calculate_car_tax (write), check_clean_air_zone (write), check_mot_due_date (write), mot_outlook (write), estimate_running_costs (write) and 1 more
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http autoza-uk https://autoza.co.uk/api/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__autoza-uk__get_model_reliability",
"mcp__autoza-uk__search_used_cars",
"mcp__autoza-uk__get_uk_price_guide"
],
"ask": [
"mcp__autoza-uk__calculate_car_tax",
"mcp__autoza-uk__check_clean_air_zone",
"mcp__autoza-uk__check_mot_due_date",
"mcp__autoza-uk__mot_outlook",
"mcp__autoza-uk__estimate_running_costs",
"mcp__autoza-uk__ask_about_car"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as autoza-uk. Review it before you use it.
